Review the system per organization-defined frequency to identify unnecessary and nonsecure functions, ports, protocols, software, and services.
No STIG checks reference this CCI.